
What happened
A tax accountant firm on a ChatGPT business plan saw its owner's account banned, which cut off all staff ChatGPT access, past research, and connected API; the appeal was rejected within hours with no reason given.
Why it matters
Because users are never shown the ban criteria, the only defenses are deciding what to send and keeping local records; relying on one provider or asking for an explanation after a ban is likely too late.
What to watch
The body says the firm's staff believed the trigger was using agent features from three devices, repeated professional questions, or a mail integration, but OpenAI does not say which inputs are flagged, so the test is whether a written internal policy exists before any ban.
WHO IT HITSProfessionals who use AI under confidentiality duties, such as lawyers and accountants, plus any team sharing a single business AI subscription, need a prewritten policy and local copies of their data because one account ban can stop the whole office.
Summaries like this, in your inbox every morning.
The case described here is not a technical failure but a governance gap. The office had a business plan and assigned seats to staff, yet the owner's single account acted as a hinge: when it stopped, every staff member's ChatGPT, past research, and the connected API stopped together. The article compares this with other reports: warnings sent in September 2024 to users who asked an AI model about its reasoning process, and a June 2026 forum post in which personal and organizational accounts were banned at the same time, halting internal development. OpenAI's help page, viewed on 2026-09-28, lists policy violations, terms violations, security concerns, repeated violations after a warning, and incomplete identity or age verification as reasons for suspension. A usage policy effective October 29, 2025 also names providing qualified advice without proper involvement of a qualified person as a prohibited act, which places professional consultations near that line. The body says it is not known whether that rule caused the tax office's ban.
The article's structure makes the asymmetry explicit: the service side holds the criteria and the reason, while the user side may be asked to explain the history of their use without knowing which input was the problem. The video's participants point out that even the appeal window was one attempt, rejected within hours. Since the criteria are not public, the article argues that the reachable range is not the judgment itself but the moments before sending and the local side. It sorts the video's five measures into contract operation, such as one account per person and not spreading around usage limits, and the two areas users can hold themselves: what to send and what to keep. The article notes that OpenAI itself recommends filtering content that could violate rules before sending it, using its Moderation API, which makes pre-sending checks a provider-endorsed practice.
The stakes turn on whether a written policy exists before an incident, not after. Data kept only inside the service disappears with the account, and the article says the hardest loss for the office was being unable to access past research. Whether a local tool such as Covenant Personal Edition makes a practical difference is likely to depend on how much of a team's workflow is routed through it, given its stated limits: it cannot influence a service's judgment, cannot cover logins from multiple devices or mail integrations or seat management, and cannot decide the rules for the user. For professionals who work under confidentiality duties, the article's reading is that a decision made in advance about what never leaves the device may matter more than any appeal sent afterward.
For example, today's edition would include:
AI-summarized, only the topics you pick: one digest a day via Email, LINE, or Slack.
Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →
Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.
Anthropic released Claude Sonnet 5.5 on September 28, the second model in its Claude 5.5 family, calling it fa…

Dentsu Group embedded generative AI in its accounting approval process and says it reached 99% accuracy on the…

Nvidia launched a platform Monday that it says can monitor AI agents and quarantine suspicious ones, following…

A September 2026 guide organizes AI coding tools into three types — terminal/agent tools like Claude Code, AI-…

On September 25, MAGI Games' three debating AIs split 1-1-1 on three mini-game proposals and refused to budge…

Running Claude Code in one shared working tree produced 8 accidents and near-misses between June and September…
